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^^^Meth od and appar atus for web television franking 

The invention relates generally to the task of printing postage indicia, typically a replica of a 
franked meter impression, in a home or small office. It relates more particularly to such 
printing with the use of a television set-top box or web television interface. 

5 Background of the invention 

For many decades, postage has been applied to mail pieces in several ways, most commonly 
postage stamps, and imprints by postage meters (franking machines). Both technologies are 
very well developed and accepted. A postage meter, for example, uses a secure printer with a 
printing plate that is not accessible to the customer and that is not easily counterfeited. The 

10 postage meter also uses fluorescent ink, thus differing from other inks. One of the defining 
characteristics of a typical traditional postage meter is a secure housing, within which are 
. located an accounting means and the printing means including the aforementioned printing 
plate. The accounting means registers the amount of postage printed and/or the amount of 
postage paid for that may be printed, these registered amounts respectively termed the 

15 "ascending register" and "descending register." The accounting means is set directly by a 
postal authority or is remotely reset through a mechanism approved by the postal authority. 

In recent years it has been suggested by some postal authorities that postage be indicated by 
means of printed indicia which are printed by conventional (non-secure) printers such as laser 
printers, ink-jet printers, and thermal transfer printers. Such a proposal immediately raises 

20 the question of counterfeiting. It is to be anticipated that some persons would be motivated to 
attempt to use just such conventional printers to generate printing which would permit a mail 
piece to be delivered without paying any postage amount. To attempt to counter such 
fraudulent activity, postal authorities have proposed to provide information in the postal 
indicia which would permit detection of fraud. This information would be generated by 

25 cryptographic means and would be authenticated by cryptographic means. Postal authorities 
have suggested that such information would be printed by means of a two-dimensional bar 
code, and that the bar code would have some redundancy to attempt to permit reading of the 
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bar code even after smudging or obliteration of portions of the bar code. 



A typical arrangement as envisioned by some postal authorities calls for a PSD (postal 
security device) which has a secure housing and which contains coxmterparts to the 
aforementioned ascending and descending registers. The PSD's connections to the rest of the 
5 system are purely electrical. In this way the secure housing of the PSD differs greatly from 
the secure housing of the traditional postage meter, because the secure housing of the 
traditional postage meter has an opening, or more than one opening, through which is passed 
the mail piece or package label that is to receive the printed indicium. 

The PSD contains processing capability for estabUshing cryptographically secure 
10 communication with a postal authority, which permits setting and reading the ascending and 
descending registers and related information. It contains nonvolatile memories for the 
registers and for cryptographic keys. It contains firmware to permit generation of data to be 
used for printing of postal indicia. One arrangement for a PSD is that set forth in PCT 
publication 98-20461 entitled "System for protecting cryptographic processing and memory 
15 resources for postal franking machines.'' 

The PSD may contain a secure and reliable real-time clock and calendar, or alternatively it 
may employ a cryptographically secure substitute for such a real-time clock and calendar as 
described in PCT publication 98-08325 entitled "Printing postage with cryptographic 
clocking security." 

20 In the typical arrangement as envisioned by some postal authorities and by some companies 
seeking to offer such services, the PSD is located physically nearby to the printer. For 
example it may be a "button" integrated circuit plugged into a socket that is connected to a 
personal computer with a printer. 

Alternative topologies are described for example in PCT publication 98-13790 entitled "Proof 
25 of postage digital franking." In that publication it is proposed to link a PSD to one or more 
printers for printing of postal indicia, for example through a local area network. Such an 
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arrangement could be useful in a business or office setting. 
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Despite the development of these and other proposed ways of arranging a system including a 
PSD and one or more printers, there is a need for a system suitable for homes and small 
businesses. There is a need for such a system composed largely of existing and off-the-shelf 
5 equipment, that requires little or no additional expenditure of money or installation of new 
equipment. There is a need for such a system that does not require a personal computer and 
the attendant expense and potential for malfunction. 

Summary of the invention 

The invention solves the problem of printing postage indicia, typically a replica of a franked 
If) meter impression, in a home or small office, with the use of a television set-top box or web 
r television interface. The system brings the ability of printing postage stamps on label stock. 

Description of the drawing 

ll I Fig. 1 is a functional block diagram of the system according to the invention. 

. I Detailed description 

15 In the system disclosed herein, a postage indicium is printed onto a self-adhesive or water- 
activated label. The indicium is printed using a printer 81, which may be a printer supplied 
with a set-top box 70 for web television viewing. For example, in some web television 
viewing systems, a printer is provided for printing information for the user or for printing 
store coupons or other incentives. It has been suggested, for example, to have an incentive 

20 associated with a pay-per-view movie, such as a coupon which may redeemed for some 

product or activity connected iwth the movie. The printer 81 used for such coupons could be 
employed to print postage indicia on label stock. The set-top box 70, printer 81, television 
83, and remote control 88 are collectively termed the customer station. 
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The sequence of events may be as will now be described. The customer identifies himself or 
herself to the Host Data Center 65 (sometimes simply called a "host"), via a communications 
link 60 which is preferably the Internet but which could optionally be a private network 
operated by the; service provider. The user employs a television remote control device 88 to 
5 send signals to the set-top box 70, and calls up a submenu relating to postage. The submenu 
is displayed on the screen of the television 83. The menu requires the customer to enter an 
identification, and this together with a unique identifier associated with the set-top box 70 is 
transmitted to the Host Data Center 65. The Host Data Center 65 confirms that the 
identification and identifier are valid. The user inputs may be by means solely of inputs by 
10 the remote control device 88 or may be accomplished in part by means of an external 
keyboard, omitted for clarity in Fig. 1. 

■f Optionally the user may enter information about the mail piece, such as the destination 

7 address or the Zip code of the destination address. The postal indicium generated may thus 

carry the Zip code or the entirety of the destination address in a cryptographically signed 
; iJs form, which permits postal authorities to confirm that the indicium does in fact correspond to 

- the mail piece. (This permits detection of fi*audulent use of an indicium for a second or third 
I:: time on a mail piece with a different Zip code or destination address.) In addition, the 

L information printed on the label printer 8 1 (on label stock 82) may include not only the postal 

- J indicium but also the mailing address and a sorting bar code containing the Zip code. The 
20 label is affixed by the customer to the mail piece (omitted for clarity in Fig. 1) and is entered 

into the mail stream. The postal authority may then scan the indicium and perform a 
cryptographic authentication to confirm the validity of the indicium. 

If the customer has printed more than one label, then there is the danger that the customer 
would inadvertently place a label on the wrong mail piece, that is, a mail piece that does not 
25 correspond with the label. To minimize this risk, it is desirable to print on the label not only 
the bar code, which is not human-readable, but also some human-readable information to 
guide the customer in identifying the corresponding envelope. This information could 
include the aforementioned Zip code and other information to resolve any question in the case 
of two mail pieces going to the same Zip code. 
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Optionally a scale 80 is provided which is communicatively coupled to the set-top box. In 
this arrangement, the data sent to the Host Data Center 65 includes the mass of the mail piece 
(placed upon the scale) and the appropriate postage value is calculated and used in generating 
the postal indicium. The postage value is thus contained within the indicium and the 
5 customer is charged for the corresponding amount of postage. 

Alternatively the customer may communicate the mass of the mail piece by means of key 
entries at the remote control 88 or at the aforementioned keyboard. 

Those skilled in the art will appreciate that at present, speech recognition technologies are of 
Umited utility. It is expected, however, that speech recognition may be used for customer 
30 identification as described above, for communicating the mail piece destination address, and 
^ for communicating the mass of the mail piece, as well as other functions such as indicating 

i'l the class of service (mail type) such as first class, air mail, etc. 

The Host Data Center 65 contains one or more PSDs lOA, lOB, IOC. Each PSD contains 
security-critical functions for the postal indicia customer. In one arrangement, there are as 
:I15 many PSDs as there are customers and they correspond to each other. In another, preferred, 
arrangement, there are fewer PSDs than there are customers, and the operator of the Host 
Data Center 65 maintains its own set of accounts with respect to the various customers. The 
PSD contains a random number generator, various storage registers, an optional date/time 
clock, and other circuitry. The PSD supports device authorization, finance record-keeping, 
20 creation of indicia, and audit functions. In sum, the PSD ensures that only authorized persons 
are able to apply indicia to mailpieces, and ensures that the indicia are accounted for. 
Although the PSD may be located in or nearby to the set-top box 70, it is considered 
preferable for it to be located distant from the customer location, namely within the Host Data 
Center 65, 

25 It is expected that the set-top box has identification functions which are usable for 

authenticating users when they order pay-per-view movies and the like, and these functions 
rely upon a tamper-proof identifier within the set-top box 70 as well as upon cryptographic 
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functions of modest security. The built-in capability of the set-top box may include a 
fingerprint reader in which case the fingerprint authentication may be used as well. These 
functions may be combined with the above-mentioned user authentication steps to improve 
the level of confidence regarding the authentication of the customer, 

5 It should be appreciated that nothing about the system described herein need be limited to a 
single provider of delivery services. For example, the Host Data Center 65 may offer the 
ability to print indicia for the US Postal Service, for Federal Express, and for UPS. It may be 
able to give the customer information such as price comparisons. In such a system, there is 
provided a PSD or its functional equivalent corresponding to each of the delivery service 
10 providers. The host 20 has communications links to the various carriers 30A, 30B, and 30C. 

It should also be appreciated that many services are capable of being tracked based on a 

■ : package tracking number. The shipping label 82 may contain a tracking number generated by 

I J the delivery service provider, provided in bar code form for tracking purposes. In such an 

[ji arrangement, the Host Data Center 65 or the set-top box 70 may retain a list of such tracking 

; 15 numbers, which makes it easy for the customer to track mail pieces. Typically the customer 

J would use the remote control 88 or the optional keyboard to enter a tracking menu, and would 

r r| select one or more packages to be tracked. The tracking results would be displayed on the 

l:^ screen of the television 83 . 

Those skilled in the art will appreciate that the term "set-top box" does not Hterally require 
20 location on the top of the television set, and rather that the box permits connection between a 
conventional broadcast television and enhanced services such as pay-per-view television. 
Indeed it is expected that the set-top box may come to be contained in the same housing as 
the television, at such time as the set-top box becomes standardized within a particular 
country or market area, all without departing in any way with the invention. 

25 The Host 20 includes such functions as providing network access to the carriers 3 OA, 30B, 
30C; customer account control; identification access control; funds debit and credit control; 
cryptographic certificate control; and audit control. Processor 40 provides communications 
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protocol and message integrity control, which in a preferred embodiment uses TCP 
(transmission control protocol) as a way of assuring message integrity, and uses higher-level 
protocols to carry out customer sessions. Finally, functional block 50 provides 
communications interfacing, for example via frame relay to the Internet or via other 
5 communications-layer protocols for satellite, dedicated data line, analog modem, or television 
cable communications. 

The Host Data Center 65 is thus able to serve as a single point of contact for each of several 
delivery service providers. 

In an alternative embodiment, the Host Data Center 65 communicates with the customer 
d:0 station at the customer's location by means of an enhanced fax machine 90 which is 
J connected to the Internet 60 or other communications channel by an appropriate means. The 
: fax machine is, of course, connected with the public switched telephone network and 

ni responsive to incoming fax telephone calls for receiving and printing fax messages. The fax 
J machine interfaces with a printer 91 printing on label stock 92, much like the printer 81 and 

y 5 label stock 82. An optional scale 93 is connected with the fax machine 90, Optionally a 

personal computer 94 may be connected with the fax machine 90 to permit easy user inputs 
f jj and display of information from the Host Data Center 65, 
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Claims 

1 . A system for printing postal indicia at more than one location, said system comprising a 
host and more than one customer station, the host comprising at least one postal security 
device, said postal security device comprising a secure housing, cryptographic means, and 
5 nonvolatile memory, the nonvolatile memory comprising an accounting register indicative of 
postage value; 

each said customer station comprising a television, a set-top box communicatively coupled 
with the television, a remote control communicatively coupled with the set-top box, and a 
printer communicatively coupled with the set-top box, said printer disposed to print labels; 

flO said host and each customer station communicatively coupled; 

ft. said system further comprising means responsive to information provided by a customer at 

one of said customer locations via the remote control for ordering enhanced television 
services at the television; 

; said system further comprising means responsive to information provided by the customer at 

15 the remote control at one of said customer stations for sending to the host a first message 

requesting a postal indicium and identifying the customer station associated therewith, means 
responsive to the first message for presenting to the postal security device a request for the 
postal indicium; means responsive to the generation by the postal security device of a second 
message indicative of the postal indicium for transmitting information indicative of the postal 
20 indicium to the set-top box; and means responsive to said information indicative of the postal 
indicium for causing said printer to print said postal indicium on a label; 

said system further comprising accounting means within said host storing information 
indicative of postage value printed at each of said customer stations; and means responsive to 
the message identifying the customer station for modifying the stored information associated 
25 with the customer station within said accounting means; 
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said postal security device disposed to make a record in its nonvolatile memory indicative of 
the postage value communicated in said postal indicium. 



2. A method for printing postal indicia at more than one location, said method used with a 
system comprising a host and more than one customer station, the host comprising at least 
5 one postal security device, said postal security device comprising a secure housing, 

cryptographic means, and nonvolatile memory, the nonvolatile memory comprising an 
accounting register indicative of postage value; each said customer station comprising a 
television, a set-top box communicatively coupled with the television, a remote control 
communicatively coupled with the set-top box, and a printer communicatively coupled with 
10 the set-top box, said printer disposed to print labels; said host and each customer station 

^ communicatively coupled; said system further comprising accounting means within said 

host storing information indicative of postage value printed at each of said customer stations; 

■\ , said method comprising the steps of: 

. ^ providing information at one of said customer locations via the remote control relating to a 

- 1 5 requested postal indicium; 

ji sending to the host a first message requesting the postal indicium and identifying the 

rj customer station associated therewith; 

presenting to the postal security device a request for the postal indicium; 

generating by the postal security device a second message indicative of the postal indicium; 

20 making a record in the nonvolatile memory of the postal security device indicative of the 
postage value communicated in said postal indicium; 

transmitting information indicative of the postal indicium to the set-top box; 

responding to said information indicative of the postal indicium by causing said printer to 
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modifying the stored information in the accounting means associated with the customer 
station indicative of the postage value communicated in said postal indicium. 

3. A system for printing postal indicia at more than one location, said system comprising a 
host and more than one customer station, the host comprising at least one postal security 
device, said postal security device comprising a secure housing, cryptographic means, and 
nonvolatile memory, the nonvolatile memory comprising an accounting register indicative of 
postage value; 

each said customer station comprising a fax machine and a printer communicatively coupled 
with the fax machine, said printer disposed to print labels; said fax machine communicatively 
coupled with the public switched telephone network; 

said host and each customer station communicatively coupled; 

each said fax machine further comprising means responsive to incoming fax telephone calls 
for receiving and printing fax messages; 

said system further comprising means responsive to information provided by the customer at 
one of said customer stations for sending to the host a first message requesting a postal 
indicium and identifying the customer station associated therewith, means responsive to the 
first message for presenting to the postal security device a request for the postal indicium; 
means responsive to the generation by the postal security device of a second message 
indicative of the postal indicium for transmitting information indicative of the postal indicium 
to the fax machine; and means responsive to said information indicative of the postal 
indicium for causing said printer to print said postal indicium on a label; 

said system further comprising accounting means within said host storing information 
indicative of postage value printed at each of said customer stations; and means responsive to 

10 
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the message identifying the customer station for modifying the stored information associated 
with the customer station within said accounting means; 



said postal security device disposed to make a record in its nonvolatile memory indicative of 
the postage value communicated in said postal indicium. 

4. A method for printing postal indicia at more than one location, said method used with a 
system comprising a host and more than one customer station, the host comprising at least 
one postal security device, said postal security device comprising a secure housing, 
cryptographic means, and nonvolatile memory, the nonvolatile memory comprising an 
accounting register indicative of postage value; each said customer station comprising a fax 
machine communicatively coupled with the public switched telephone network; a printer 
communicatively coupled with the fax machine, said printer disposed to print labels; said 
host and each customer station communicatively coupled; said system further comprising 
accounting means within said host storing information indicative of postage value printed at 
each of said customer stations; said method comprising the steps of: 

providing information at one of said customer locations via the fax machine relating to a 
requested postal indicium; 

sending to the host a first message requesting the postal indicium and identifying the 
customer station associated therewith; 

presenting to the postal security device a request for the postal indicium; 

generating by the postal security device a second message indicative of the postal indicium; 

making a record in the nonvolatile memory of the postal security device indicative of the 
postage value communicated in said postal indicium; 

transmitting information indicative of the postal indicium to the fax machine; 
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responding to said information indicative of the postal indicium by causing said printer to 
print said postal indicium on a label; and 

modifying the stored information in the accounting means associated with the customer 
station indicative of the postage value communicated in said postal indicium. 
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between the filing date of the prior application and the national or PCT international filing date of this 
application: 



(Application Serial No,) 
PCT/US99/01781 



(Filing Date) 
01/28/99 



(Status) (patented, pending, abandoned) 



(Patent No. if applicable) 



(Application Serial No,) 



(Filing Date) (Status)(patented,pending,abandoned) 



Power of Attorney 



(Patent No. if applicable) 



i hereby appoint Carl Oppedahl, PTO Reg. NO.^32,746, Marina T. Larson, PTO Reg. No. 32J33a^nd 
Nancy J. Parsons, PTO Reg. N0r~4Q^4 of the firm of OPPEDAHL & LARSON LLP, having office at P.O. 
Box 5270, 61 1 Main Street, Frisco, CO 80443 as attorneys to prosecute this application and to transact all 
business in the Patent and Trademark Office connected therewith. 



SEND CORRESPONDENCE TO: 


DIRECT TELEPHONE CALLS TO: 


X)RREOAHL^-IABSONJJLP 


OPPEDAHL & LARSON LLP 


P.p. EoxSZlO 


(970) 668-2050 


_.Erlsca,_CP 80443-5270 





OPPEDAHL & LARSON 



FILE NO.: ASGOP058USNP 
INVENTOR: Schwartz, et al. 

Claim for Priority 

I hereby claim foreign priority benefits under 35 U.S.C. § 1 19 (a)-(d) or 365(b) of any foreign application(s) 
for patent or inventor's certificate, or 365(a) of any POT international application which designated at least 
one country other than the United States of America, listed below and have also identified below any foreign 



applications for patent or inventor's certificate, or of, any PCT international application having a filing date 
pefore that of the application on which priority is claimed. 



EARLIEST FOREIGN APPL]CAT!ON(S), FILED WITHIN TWELVE MONTHS (6 MONTHS FOR DESIGN) PRIOR TO SAiD 
APPLICATION 


COUNTRY APPLICATION NO. 


DATE OF FILING 

(day/month/year) 


DATE OF ISSUE 
(day/month/year) 


PRIORITY 
CLAIMED 


CERTIFIED 

COPY 

ATTACHED 








YES[ ] N0[ 
] 


YES[ ] N0[ ] 


FOREIGN APPLICATION(S), IF ANY, FILED MORE THAN 12 MONTHS {6 MONTHS FOR DESIGN) PRIOR TO SAID 
APPLICATION 


COUNTRY APPLICATION NO. 


DATE OF FILING 
(day/month/year) 


DATE OF ISSUE 
(day/month/year) 













Provisional Application 

I hereby claim the benefit under 35 U.S.C § 11 9(e) of any United States provisional app!ication(s) listed 
below. 



60/073,144 01/30/98 

(application number) (filing date) 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements are made with the 
knowledge that willful false statements and the like so made are punishable by fine or imprisonment or 
both, under Section 1001 of Title 18 of the United States Code and that such willful false statements may 
jeopardize the validity of the application or any patent Issued thereon. 



NAME OF SOLE 
OR FIRST 
INVENTOR 


LAST NAME 
SCHWARTZ 


FIRST NAME 

ROBERT 


MIDDLE NAME 


RESIDENCE & 
CITIZENSHIP 


CITY OF RESIDENCE 

BRANFORD 


STATE OR COUNTRY OF 
RESIDENCE r-r^ 
CT C\ 


COUNTRY OF 
CITIZENSHIP 
US 


POST OFFICE ADDRESS 

191 Linden Drive 


CITY 

Branford 


STATE/COUNTRY ZIP 

CODE 

CT 


DATE 


SIGNATURE , ^ ^ /9 i 



[X] Signature for additional joint inventor attached. Number of Pages 1 . 
[ ] Signature by Administrator(trix) or legal representative for deceased or 

incapacitated inventor. Number of Pages . 

[ ] Signature for inventor who refuses to sign or cannot be reached by person 

authorized under 37 CFR § 1 .47. Number of Pages . 



OPPEDAHL & LARSON 



FILE NO.: ASCOP058USNP 
INVENTOR: Schwartz, et al. 



NAME OF SECOND 
INVENTOR 


LAST NAME 
BROOKNER ' 


FIRST NAME 
GEORGE 


MIDDLE NAME 


RESIDENCE & 
CITIZENSHIP 


CITY OF RESIDENCE 

.NORWALK_^ ^ 


STATE OR COUNTRY OF 
RESIDENCE A-'T^ 

CT / 


COUNTRY OF 
CITIZENSHIP 

US 


POST OFFICE ADDRESS 

1 1 Surrey Drive 


CITY 

Norwalk 


STATE/COUNTRY ZIP 

CODE 

CT 


DATE 


SIGNATURE JlJ^ / 


NAME OF THIRD 
INVENTOR 


LAST NAME 
ROSEN 


FIRST NAME 
FyCHARD___„^ 


MIDDLE NAME 


RESIDENCE & 
CmZENSHiP 


CITY OF RESIDENCE 

TRUMBULL 


STATE OR COUNTRY OF 
RESIDENCE 

CT f "y[ 


COUNTRY OF 
CITIZENSHIP 

US 


POST OFFICE ADDRESS 

1 80 Merrimac Drive 


CITY 

Trumbull 


STATE/COUNTRY ZIP 
CODE 

CT 







